Open Source Software LEAD Security Engineer - Software Supply Chain

Truist Financial
Charlotte, Richmond, Raleigh
Workplace: OnsiteFull timeUSD 160,000 - 200,000 annuallyFunction: CybersecurityExperience: 10+ yearsSkills: ["Leadership","Mentorship","Risk management","Stakeholder management","Risk reporting"]

Own the practical execution of open source software security across governance, engineering workflows, tooling, automation, and risk reduction. Lead enterprise governance and preventative controls for secure-by-default OSS lifecycle management, including dependency hygiene, SBOM/provenance, and CI/CD preventative gates. Partner with CI/CD, DevSecOps, platform, application security, and risk teams to monitor, remediate, and safely integrate components into enterprise delivery pipelines while reducing software supply chain exposure.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Truist Financial
Truist Financial
1 week ago

Open Source Software LEAD Security Engineer - Software Supply Chain

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own the practical execution of open source software security across governance, engineering workflows, tooling, automation, and risk reduction. Lead enterprise governance and preventative controls for secure-by-default OSS lifecycle management, including dependency hygiene, SBOM/provenance, and CI/CD preventative gates. Partner with CI/CD, DevSecOps, platform, application security, and risk teams to monitor, remediate, and safely integrate components into enterprise delivery pipelines while reducing software supply chain exposure.
Location: Charlotte, Richmond, Raleigh
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Lead, mentor, and develop a team of security engineers, analysts, and contractors for OSS governance and software supply chain security initiatives.
  • •Define and operate enterprise governance, standards, processes, and preventative controls for secure OSS usage, dependency hygiene, and software supply chain risk management.
  • •Establish OSS lifecycle management for intake, approval, tracking, version management, vulnerability remediation, end-of-life retirement, and exception governance.
  • •Design and implement CI/CD preventative controls such as automated security gates for dependency scanning, license checks, artifact validation, and provenance controls.
  • •Identify and reduce software supply chain risks (vulnerable dependencies, malicious packages, dependency confusion, compromised maintainers) and establish incident detection/response capabilities.

Pay and Benefits

Salary: USD 160,000 - 200,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionLife Insurance401kPaid Leave

Key Requirements

  • •Minimum of 10 years of experience in security engineering or related cybersecurity roles.
  • •Deep specialized knowledge of cybersecurity principles, theories, and concepts.
  • •Extensive experience applying software development lifecycle security practices.
  • •Expertise in threat modeling, security testing, and penetration testing.
  • •Proven experience implementing and managing complex information security technologies.
Experience:10+ yearsSecurity engineeringCybersecurityDevSecOpsApplication securitySoftware supply chain security
Skills:LeadershipMentorshipRisk managementStakeholder managementRisk reporting
Certifications:CISSPCISMCEHGIAC
Languages:English
Tech Stack:CI/CDDevSecOpsSBOMSCASLSAOWASPNIST SSDFSoftware composition analysisSBOM generationPackage managersBuild systemsArtifact repositoriesDependency scanningLicense checksArtifact signingPythonPowerShellBash

Company Brief

Truist Financial
Provides consumer and commercial banking, wealth management, insurance, lending, and payments services through a large U.S. financial services platform formed by the merger of BB&T and SunTrust.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Charlotte, United States
Founded: 2019
WebsiteLinkedIn